[Samba] Samba and Windows XP

[John Russell]

 this is a security check new to Windows XP (or maybe only
Windows XP service pack 1).  It can be disabled via a group policy in
Active Directory.  The policy is:

"Computer Configuration\Administrative Templates\System\User
Profiles\Do not check for user ownership of Roaming Profile Folders"

...and it should be set to "Enabled".

Does the new version of samba have an Active Directory analogue?  If so,
then you may be able to set the policy through this.

If you cannot set group policies in samba, then you may be able to set
the policy locally on each machine.  If you want to try this, then do
the following (N.B. I don't know for sure that this will work in the
same way as a domain group policy):

On the XP workstation log in with an Administrator account.

Click: "Start", "Run"
Type: "mmc"
Click: "OK"

A Microsoft Management Console should appear.
Click: File, "Add/Remove Snap-in...", "Add"
Double-Click: "Group Policy"
Click: "Finish", "Close"
Click: "OK"

In the "Console Root" window:
Expand: "Local Computer Policy", "Computer Configuration",
"Administrative Templates", "System", "User Profiles"
Double-Click: "Do not check for user ownership of Roaming Profile
Folders"
Select: "Enabled"
Click: OK"

Close the whole console.  You do not need to save the settings (this
refers to the console settings rather than the policies you have
changed).

Reboot.

----- Original Message -----
From: "Patrick Bennett Hagen" <junkmail at hcs.com>
To: <samba at lists.samba.org>
Sent: Tuesday, November 19, 2002 5:32 AM
Subject: [Samba] Samba and Windows XP


> I have a domain user that lacks rights to the local machine to run RPC.
> Under a real Win2k domain, I'd assign the "Domain Users" group to the
local
> machine "Administrators" group so I could avoid any registry, file system
or
> services rights (I don't care if they have full access to the local
> machine).  When I do that I get an error: "Information returned from the
> object picker for object "Domain Admins" was incomplete. The object will
not
> be processed"
>
> I cranked up the verbosity in the log files and I get nothing.
>
> Has anyone had and resolved the same problem?
>
> Any help or suggestions are appreciated.  I've search hi and lo on Google
(I
> found one posting last year but he never got a reply and he hasn't replied
> to an email I sent him).  Also, the Samba lists don't have anything as far
> as I can tell...
>
> Thanks,
>
> Patrick
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba